keybase.io

Mirimir mirimir at riseup.net
Thu Sep 1 02:55:09 CEST 2016


On 08/31/2016 01:45 AM, Werner Koch wrote:
> On Wed, 31 Aug 2016 04:27, mirimir at riseup.net said:
> 
>> What are the defects in <https://keybase.io/>?
> 
> They not even try to minimize the use of meta data but use privacy
> invading services (Facebook, Twitter, etc) to connect the key into a way
> larger network than what we have with the Web of Trust.  Kind of key
> signing party for the Twitter generation.

But that's what I like about it :) Mirimir can't have an old-school Web
of Trust. Nobody that I know in meatspace knows that I use that
pseudonym. With KeyBase, Mirimir has signed proofs on Hacker News,
reddit, and GitHub. Even if someone compromised my KeyBase account, and
added a fake key, they couldn't change those published proofs, which are
signed by my true key.

I don't use Facebook or Twitter, because they're not friendly to
pseudonyms. But for those not using pseudonyms, privacy invasion through
verification of meatspace identity is a benefit, no? There's no privacy
in attending a key signing party, is there?

> I am not sure, but I heard that keybase.io is moving towards a
> centralized system for encrypted message exchange.
> 
> 
> Shalom-Salam,
> 
>    Werner
> 



More information about the Gnupg-users mailing list